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(54) Control system and method for controlling processes 

(57) The invention relates to a control system for 
process control comprising at least one process control 
system, which comprises a field bus (FB), at least one 
. process control device (PCD) communicating with the 
field bus (FB), and at least one field bus controller (FBC) 
communicating with said at least one process control 
device (PCD) via said field bus (FB) using a field bus 
protocol, said control system further comprising at least 
one client (OPC1, OPC2, OPCn) providing access to 
control the process control devices (PCD) using a con- 
trol protocol, and a network (NW). The control system 
further comprises a server device (SD) communicating 
with said at least one field bus controller (FBC) via said 
network (NW) using a network protocol, and with said 
at least one client (OPC1 , OPC2, OPCn) using the con- 
trol protocol. The control system also comprises means 
for transferring information according to the field bus 
protocol between said at least one field bus controller 
(FBC) and said server device (SD) in network protocol 
messages, and means for performing conversion be- 
tween said network protocol messages and the control 
protocol. 
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Description 
Technical field 

[0001] The present invention relates to a control sys- 
tem for process control comprising at least one process 
control system, which comprises a field bus, at least one 
process control device communicating with the field 
bus, and at least one field bus controller communicating 
with said at least one process control device via said 
field bus using a field bus protocol, said control system 
further comprising at least one client providing access 
to control the process control devices using a control 
protocol, and a network. The invention further relates to 
a method for controlling processes, in which at least one 
process control system is used comprising a field bus, 
at least one process control device communicating with 
the field bus, and at least one field bus controller com- 
municating with said at least one process control device 
via said field bus using a field bus protocol, in which 
method at least one client is used for providing access 
to control the process control devices using a control 
protocol, and a network. 

Discussion of the related art 

[0002] Many distributed process control systems 
have recently been developed. Some of them are de- 
signed for factory area controlling operations, wherein 
process control devices communicate via a field bus 
with a field bus controller, which further communicates 
with a control station via another communication bus. 
The process control devices can therefore be controlled 
by the control station. This kind of control system needs 
an appropriate wiring to be installed in the factory. 
[0003] Such distributed control systems are also 
known which can facilitate the modifications to a control 
system by taking the advantage of existing communica- 
tion networks, such as Internet. This method makes it 
possible to connect distributed process control devices 
with a centralized control station. The process control 
devices can be situated even in different geographical 
areas, for example, in different areas of a city or even 
in different cities. One example of this kind of system is 
based on so called OPC (OLE for Process Control) tech- 
nique, which is under development and which provides 
a definition of interface for communication between field 
bus controllers and a control station of a distributed con- 
trol system. OLE (and its Component Object Model) pro- 
vide a basis for application interoperation in the Micro- 
soft Windows® based operating system environment. 
[0004] Object Linking and Embedding (OLE) is a com- 
pound document standard developed by Microsoft Cor- 
poration. It enables a creation of objects with one appli- 
cation and linking or embedding them in a second ap- 
plication. Embedded objects retain their original format 
and links to the application that created them. OLE de- 
fines the Component Object Model, which specifies a 



programming-language-independent binary standard 
for object implementations (i.e., it specifies what the im- 
plementation of the objects has to look like). In the Com- 
ponent Object Model, the concept of interface has great 
s importance. An interface in this connection means a set 
of semantically related functions implemented on an ob- 
ject. For example, an implementation of an interface can 
be an array of pointers to functions. Any program code 
that has a pointer to that array can call the functions in 
10 that interface. A Windows Object implements one or 
more interfaces, i.e., provides pointers to function tables 
for each supported interface. The OPC is based on com- 
ponent object model (COM) and distributed COM 
(DCOM) from Microsoft Corp which enable communica- 
'5 tion between separate software components. The OPC 
consists of OPC client and OPC server. The OPC server 
provides interface between the hardware of the field bus 
controller and the communication software, wherein the 
OPC client can read information from the field bus con- 
zo troller and transmit information to the field bus controller 
via the OPC server. 

[0005] In the control station is an OPC client control 
module for managing the process control devices of the 
system and displaying information which is read from 
2 $ the process control devices via the field bus controller. 
The client control module have to be capable of forming 
a data transfer connection to the field bus controllers. 
Therefore, each field bus controller has a unique ad- 
dress (IP address) to distinguish it from other devices 
30 connected to the Internet network. The messages which 
are communicated between the field bus controllers and 
one or more control station are standard TCP/IP mes- 
sages which among other things comprise source ad- 
dress (the IP address of the sender of the message), 
35 destination address (the IP address of the intended re- 
cipient of the message), and payload data. The payload 
data comprises the OPC compliance information. To be 
able to perform necessary control operations the client 
control module of the control station needs to know ad- 
40 dress information of all the field bus controllers of the 
control system. There can exist a large amount of field 
bus controllers and their address may change (because 
of modifications of the control system) wherein the man- 
agement of the control system may become very de- 
45 manding or even overwhelming. One further require- 
ment to the IP address of the field bus controller in prior 
art systems is that the address has to be fixed. 
[0006] The control station has to be able to establish 
a connection to the field bus controllers in the above 
50 mentioned distributed control system. The use of net- 
work address translation (NAT) by routers and firewalls 
in the Internet may make the connection establishment 
from the control station impossible. Network address 
translation is a method of connecting multiple comput- 
55 ers to the Internet (or any other IP network) using one 
IP address. This allows home users and small business- 
es to connect their network to the Internet cheaply and 
efficiently. The network address translation is also used, 
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for example in the firewalls, to hide the real IP address 
to hinder possible intruders from accessing to the sys- 
tem. 

[0007] There are several disadvantages in prior art 
systems and methods presented above. For example, 
the OPC server and all the necessary operating system 
resources that the OPC server needs have to be in- 
stalled into the field bus controller which means that the 
amount of the software of the field bus controller be- 
comes quite massive. This increases the software and 
hardware costs of the field bus controller significantly. 
This increases also the maintenance costs. The use of 
OPC server induces that also a certain operating system 
has to be used in the field bus controller. Further, the 
OPC client needs to know exactly, which information 
can be found in which address, and the OPC clients may 
have to collect such information from many different 
places which can be time consuming. 
[0008] In control systems which use Internet to trans- 
fer information between field bus devices and control 
station it is very important to pay attention to data secu- 
rity because the potential for eavesdropping is great 
when transmitting unencrypted information via Internet 
has. However, it is not easy to configure firewalls for pro- 
tecting the communication via Internet in prior art control 
systems. 

Objectives and summary of the invention 

[0009] It is thus an object of this invention to provide 
a control system and method for process control, in 
which the field bus controllers can be simpler and 
cheaper than in prior art systems and methods. The 
present invention is based on the idea that control sys- 
tem dependent signals are tunnelled on TCP/IP protocol 
messages which are communicated between the field 
bus controllers and a server which is in the network, 
wherein transformation between device dependent in- 
formation and OPC based information is performed in a 
centralized manner in the server. A system according to 
a first embodiment of the present invention is character- 
ized by that the control system further comprises: 



- a server device communicating with said at least 
one field bus controller via said network using a net- 
work protocol, and with said at least one client using 
the control protocol, 

- means for transferring information according to the 
field bus protocol between said at least one field bus 
controller and said server device in network proto- 
col messages, and 

- means for performing conversion between said net- 
work protocol messages and the control protocol. 

[0010] A method according to the present invention is 
characterized by that a server device is communicating 
with said at least one field bus controller via said network 
using a network protocol, and with said at least one cli- 



ent using the control protocol, information is transferred 
according to the field bus protocol between said at least 
one field bus controller and said server device in net- 
work protocol messages, and conversion between said 
5 network protocol messages and the control protocol are 
performed. 

[0011] The present invention provides significant ad- 
vantages over prior art systems and methods. The field 
bus controllers can be implemented with less software 
10 and hardware resources than in prior art systems. Fur- 
ther, the production costs of the field bus controllers can 
be reduced by using the method according to the inven- 
tion. The operating system for the field bus controller 
can be selected more freely in the control systems ac- 
15 cording to the invention. Also savings can be achieved 
in installing, management and maintenance of the con- 
trol system. The present invention does not restrict the 
selection of the data security solutions for the control 
system either. 

20 [0012] The OPC server is not needed in the field bus 
controllers wherein only one (or two) OPC server is 
needed in the whole control system. 
[0013] This kind of arrangement provides the advan- 
tage that the OPC server and respective operating sys- 

2 $ tern are not needed in the field bus controller, wherein 
the operating system of the field bus controller can be 
selected more freely than in prior art systems. The op- 
erating system to be used can then be an operating sys- 
tem directed to control solutions and embedded sys- 

30 terns. 

Brief discussion of the drawings 

[0014] The invention will now be described in more 
35 detail in the following with reference to the appended 
figures, in which 



Fig. 1 shows a prior art control system in which the 
method according to a preferred embodiment 
of the invention can be applied, 

Fig. 2 shows as a simplified block diagram a control 
system according to a preferred embodiment 
of the invention, and 

Fig. 3 shows as a simplified data flow diagram a con- 
trol system according to an advantageous em- 
bodiment of the invention. 



40 



45 



so Detailed description of the invention 

[0015] In the following the invention is described in a 
control system 1 in which OPC technique is applied and 
Internet is used as a first network NW1 but the invention 
5 5 is not limited to that kind of systems only. 

[001 6] Fig. 2 is a simplified block diagram of a control 
system 1 according to a preferred embodiment of the 
present invention. It comprises one or more field buses 
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FB, in which process control devices PCD are connect- 
ed. The field buses FB of the control system need not 
to be similar but they can also be different field buses 
such as LON (Local Operating Network), Profibus, and/ 
or CAN (Controller Area Network). The process control 
devices PCD are control equipment such as sensors, 
actuators and controllers and which are provided with 
means for interfacing with a process to be controlled. 
The process can be e.g. a paper machine, a power 
plant, a home automation system, etc. The means for 
interfacing with the process may vary depending on the 
process. For example, they may be measuring means 
to measure e.g. temperature, pressure, humidity, 
speed, etc. and/or controlling means to control different 
parameters, e.g. speed of a motor, temperature of a 
heating system, pressure of a fluid, etc, 
[0017] The field bus controllers FBC communicate 
with the process control devices to read information (e. 
g. measurement) from them and to write information (e. 
g. new parameter values) into them. The field bus con- 
trollers FBC also communicate with the control station 
CS via the first network NW1 and a second network 
NW2. In this advantageous embodiment of the present 
invention a firewall FW is provided between the first net- 
work NW1 and the second network NW2. The first net- 
work NW1 is e.g. Internet and the second network NW2 
is e.g. Intranet. Information collected from process con- 
trol devices PCD can be provided to control room per- 
sonnel as a visible and/or audible information. Visible 
information can be displayed on a display DP of the con- 
trol station CS and audible information can be directed 
to e.g. a loudspeaker LS. The collected information or 
part of it can also be stored into memory means MEM, 
which can comprise semiconductor memory, such as 
RAM and/or EEPROM, hard disk, CDROM, digital ver- 
satile disk (DVD), etc. The control room personnel can 
control the process, for example, by changing parame- 
ters of the process control devices by a keyboard KB of 
the control station. The new control values are then 
transferred via the second network NW2, the firewall FW 
and the first network NW1 to that field bus controller FB 
which controls the process control device PCD in ques- 
tion and delivers the information to the device. 
[0018] In the following, the communication between 
the field bus controller FBC and the control station CS 
according to a preferred embodiment of the present in- 
vention will be described in more detail. In a situation in 
which there is information to be transmitted from a field 
bus controller to the control station CS the field bus con- 
troller FCB performs so called tunnelling operation to the 
information to be transmitted. This means that the field 
bus controller FCB forms one or more packets from the 
information, i.e. frames which comprise one or more 
headers, payload and check sum field(s), if necessary. 
The payload field comprise the actual information to be 
transmitted. In this situation the payload field can com- 
prise field bus protocol form data or field bus control re- 
lated data of the field bus in question. Therefore the for- 



mat of the payload information may vary depending on 
the field bus from which the information is to be trans- 
mitted. The field bus controller inserts necessary ad- 
dressing information into the header field: destination 
5 address, source address, destination port number, and 
source port number. The destination address is the IP 
address of the OPC server, which preferably is fixed. 
The source address is the IP address of the field bus 
controller, which may be dynamic or fixed. The packets 
10 are, for example, TCP/IP packet which are transmitted 
from the field bus controller to the first network NW1 . In 
the first network NW1 the packets are routed according 
to the destination address to be delivered via the firewall 
FW to the server device SD which comprises the OPC 
15 server in the second network NW2. The server device 
SD receives the packets and detaches the payload in- 
formation from the packets. 

[001 9] The server device SD is provided with interface 
means IF which perform tunnelling/detunneling and in- 
20 terracing between the field bus protocol and the OPC 
standard. The received field bus information is then 
transformed into format according to the OPC standard 
and identification information of the source of the infor- 
mation is added. The interface means IF also performs 
25 combining of information from different field buses. In- 
formation can then be transferred between the OPC 
server and the OPC client(s) via the interface means IF. 
After that the OPC server OS of the server device SD 
and the OPC client OC of the control station CS can 
30 communicate to read the information to the control sta- 
tion CS. The control station CS may situate in a different 
place from the server device SD. The control station CS 
can have access to the server device SD e.g. via the 
network NW wherein the OPC server of the server de- 
35 vice SD and the OPC client of the control station CS can 
communicate according to the OPC standard. There 
may exist many O PC clients for different purposes. Nor- 
mally the OPC clients are not allowed to have access to 
all the information the OPC server has but only to infor- 
40 mation from a certain field bus controller, or only to part 
of it. For example, one OPC client may be provided to 
display information of a certain measurement wherein 
that OPC client can have access to only that information 
in the OPC server. This situation is shown in Fig. 3 in 
45 which there are separated information areas A1 , A2, An 
for different OPC clients OPC1, OPC2, OPCn. The in- 
formation areas A1 , A2, An can be e.g. different memory 
areas of the server device SD. The OPC server sees 
then only one field bus although there may exist many 
50 different field buses. 

[0020] To provide control operations on the process 
control devices the OPC client can form a connection 
for controlling the devices. If the OPC client is not in the 
same host than the OPC server, the connection can be 
55 formed e.g. via the second network NW2, which is e.g. 
Intranet. The OPC client contacts the OPC server by us- 
ing the address of the OPC server and uses messages 
according to OPC standard. The OPC client transfers 
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the modified value(s) to the OPC server, which provides 
that/them further to the interface means IF and adds 
necessary identification information. Then, the interface 
means IF determines the destination field bus in which 
the process control device to be controlled exists. Ac- 5 
cording to the determination the interface means IF per- 
forms the tunnelling of the information on TCP/IP pack- 
ets and includes necessary addressing information into 
the TCP/IP packets. These TCP/IP packets are routed 
through the network NW to the correct field bus control- w 
ler FCB. The field bus controller FCB forwards this in- 
formation to that process control device PCB in which 
the value(s) is/are modified. 

[0021] It is also possible to use data security opera- 
tions in connection with control systems of the present 15 
invention. All the devices which are communicating via 
Internet can also have a firewall installed. That is pos- 
sible because the addresses of the field bus controllers 
need not to be fixed and the network address translation 
is allowed. This has the effect that all the communication 20 
between the field bus controllers and OPC server and, 2 
if necessary, between OPC clients and OPC server goes 
through the firewall which may also perform encrypting/ 
decrypting of the information. All the other aspects of 
the invention remains substantially the same. There- 25 3. 
fore, the communication security can be higher in the 
control system according to the present invention than 
in prior art control systems. 

[0022] As a conclusion from the above the present in- 
vention provides a method and a system in which differ- 30 
ent field buses can be combined into one virtual field 4. 
bus. The implementation of the field bus controllers is 
easier and cheaper than in prior art systems. The oper- 
ating system to be used in the field bus controllers can 
be selected quite freely, for example Linux operating 35 5. 
system, which is cheap or even free of charge, can be 
used, or an operating system directed to control solu- 
tions and embedded systems can also be used. It is also 
possible that different field bus controllers can have dif- 6. 
ferent operating systems. 40 
[0023] There are many application areas in which the 
present invention can be applied. For example, factory 
automation, power plant automation for local and na- 7. 
tional electricity production systems, home automation, 
sub urban systems for maintenance services, etc. 45 
[0024] The present invention is not limited to the 
above described embodiments only, but it can be varied 
within the scope defined by the attached claims. 
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1 . A control system for process control comprising at 
least one process control system, which comprises 
a field bus (FB), at least one process control device 55 
(PCD) communicating with the field bus (FB), and 
at least one field bus controller (FBC) communicat- 
ing with said at least one process control device 



(PCD) via said field bus (FB) using a field bus pro- 
tocol, said control system further comprising at least 
one client (OPC1, OPC2, OPCn) providing access 
to control the process control devices (PCD) using 
a control protocol, and a network (NW), character- 
ized in that the control system further comprises: 

- a server device (SD) communicating with said 
at least one field bus controller (FBC) via said 
network (NW) using a network protocol, and 
with said at least one client (OPC1, OPC2, 
OPCn) using the control protocol, 

- means for transferring information according to 
the field bus protocol between said at least one 
field bus controller (FBC) and said server de- 
vice (SD) in network protocol messages, and 
means for performing conversion between said 
network protocol messages and the control 
protocol. 

. A system according to claim 1 , characterized in 
that said server device (SD) and at least one client 
(OPC1 , OPC2, OPCn) are formed in a same device. 

A system according to claim 1 , characterized in 
that said server device (SD) and at least one client 
(OPC1, OPC2, OPCn) are formed in separate de- 
vices, and that they are arranged to communicate 
via said network (NW). 

A system according to claim 1 , 2 or 3, character- 
ized in that said control protocol is based on OLE 
for Process Control. 

A system according to any of claims 1 to 4, char- 
acterized in that said process control system is an 
industrial process control system. 

A system according to any of claims 1 to 4, char- 
acterized in that said process control system is a 
home automation system. 

A method for controlling processes, in which at least 
one process control system is used comprising a 
field bus (FB), at least one process control device 
(PCD) communicating with the field bus (FB), and 
at least one field bus controller (FBC) communicat- 
ing with said at least one process control device 
(PCD) via said field bus (FB) using a field bus pro- 
tocol, in which method at least one client (OPC1, 
OPC2, OPCn) is used for providing access to con- 
trol the process control devices (PCD) using a con- 
trol protocol, and a network (NW), characterized in 
that a server device (SD) is communicating with 
said at least one field bus controller (FBC) via said 
network (NW) using a network protocol, and with 
said at least one client (OPC1 , OPC2, OPCn) using 
the control protocol, information is transferred ac- 
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cording to the field bus protocol between said at 
least one field bus controller (FBC) and said server 
device (SD) in network protocol messages, and 
conversion between said network protocol messag- 
es and the control protocol are performed. 5 

8. A method according to claim 7, characterized in 
that TCP/IP is used as the network protocol. 

9. A method according to claim 7 or 8, characterized 10 
in that OLE for Process Control is used as the con- 
trol protocol. 

10. A method according to claim 7, 8 or 9, character- 
ized in that it is utilized for controlling industrial 15 
processes. 
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